Elttam are a security firm who offer (among other things) pentesting - so they would usually be working privately with, say, a client's website. One wouldn't u

Elttam are a security firm who offer (among other things) pentesting - so they would usually be working privately with, say, a client's website. One wouldn't usually file a CVE in these circumstances, if only the client is affected.